Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: YaL8rNBYr2i5vf4yl1MXd0BYGVuApkokM8hFVUO2alk=
Subject key identifier: E6:8A:DF:57:A6:84:F9:87:C9:80:48:CD:8E:47:79:FC:6A:DE:E0:B6
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019D992AF8CD3DD7F53ED7E35D79C82B90F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: zbusOqq4Gzd2VCwv0fw/STR9VWS8HzxaYbLxFXDtDiw=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f8:cd:3d:d7:f5:3e:d7:e3:5d:79:c8:2b:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=e68adf57a684f987c98048cd8e4779fc6adee0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:b3:94:ff:ee:54:b4:7b:9b:44:24:ff:42:
97:09:00:46:af:9c:8b:dc:f6:e6:7d:ec:fa:db:51:
7d:48:78:3d:3d:e4:e3:f6:cc:44:29:61:b6:78:1b:
41:6a:18:5f:4e:88:c1:33:d5:34:5c:b0:e9:de:b4:
a1:25:1f:2d:c2:ec:c6:08:d4:75:0d:08:34:b2:1d:
1a:87:e9:6f:24:6b:c7:13:ee:81:ad:b2:64:f8:26:
db:84:82:1c:46:fe:9a:6a:f6:8c:f9:21:c1:de:d8:
34:63:8b:7e:f1:ae:9c:9b:3f:7a:d6:4d:71:e5:26:
4d:4e:64:8a:f9:21:be:f3:9e:85:ff:26:13:c2:a0:
4b:e2:38:06:7d:68:de:0a:cf:8e:4c:ad:0e:23:a8:
ea:54:77:63:b9:aa:52:42:61:a1:83:c1:24:c2:34:
a2:1c:8a:18:d2:5e:d0:24:40:34:6e:92:2c:85:8c:
7a:4c:4d:4e:45:27:6e:15:76:a3:26:de:cd:8f:cd:
6d:11:d9:53:17:f3:2c:bd:e2:c8:c2:ed:07:c3:c8:
30:9b:22:c4:55:ef:ea:8a:44:f8:1e:8c:84:8d:3f:
1d:df:70:57:7d:ed:88:bb:20:1d:e7:e7:7c:e7:8e:
8d:91:0d:09:a2:18:d2:ac:cd:3d:c3:fb:3b:bd:49:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:DF:57:A6:84:F9:87:C9:80:48:CD:8E:47:79:FC:6A:DE:E0:B6
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:69:7d:d1:6b:b4:68:b1:25:d2:ba:eb:5c:03:da:2e:64:ef:
fa:82:19:c2:56:86:5d:7f:ce:2b:ca:8e:5f:9e:fc:52:0f:62:
27:9d:d8:11:9d:5e:05:16:ea:eb:79:62:7b:03:12:18:a9:0e:
c8:ae:c2:c3:49:e6:3e:96:9c:09:cf:1c:26:7a:d5:2b:68:cf:
a7:d5:dc:0b:b2:1f:9e:61:95:51:12:9e:62:f4:ef:41:44:0d:
17:b1:35:8e:a2:2e:96:33:8e:16:6d:95:55:36:9d:7a:4f:ba:
2c:b2:ad:69:f3:1b:d9:02:d8:8f:79:7c:9f:64:26:ac:52:14:
69:69:c8:28:81:b2:f7:80:93:2e:14:bb:9c:f7:b4:9f:03:cf:
a4:f9:f7:17:11:2f:d2:34:97:88:5e:e6:ef:84:ca:b6:14:9d:
19:65:37:0b:d8:29:2a:eb:7f:02:83:d5:2d:79:f6:97:e2:17:
63:4f:fc:12:24:0d:13:c7:f2:c1:04:d7:0b:2d:4c:33:8c:68:
90:71:7c:f2:81:65:20:45:73:f8:84:ed:26:46:6b:24:7c:42:
16:ff:ce:0f:d6:ee:e6:ae:d4:1a:84:5a:19:6a:87:0b:7b:c1:
56:82:1b:b0:4d:ef:ea:16:b7:3a:3c:9e:bd:2c:d1:a1:5f:a0:
93:14:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:26 2026 by rpki-client